pompelmi 0.32.0 → 0.32.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "pompelmi",
3
- "version": "0.32.0",
3
+ "version": "0.32.1",
4
4
  "description": "Fast, private malware scanner for Node.js file uploads. TypeScript-first library with Express, Koa, Fastify, Next.js & Nuxt/Nitro adapters. Features deep ZIP inspection, YARA integration, ZIP bomb protection, and real-time threat detection. Zero cloud dependencies - scan files in-process before they hit disk. Perfect for GDPR/HIPAA compliance.",
5
5
  "main": "./dist/pompelmi.cjs",
6
6
  "module": "./dist/pompelmi.esm.js",
@@ -1,151 +0,0 @@
1
- # Changelog - Version 0.29.0
2
-
3
- ## 🎉 Release Date: January 29, 2026
4
-
5
- ## ✨ Major Features
6
-
7
- ### Result Caching System
8
- - **NEW**: LRU/LFU cache implementation for scan results
9
- - **NEW**: Configurable TTL and size limits
10
- - **NEW**: Cache statistics and monitoring
11
- - Significant performance improvements for repeated scans
12
- - Memory-efficient with automatic eviction
13
-
14
- ### Batch Scanning with Concurrency Control
15
- - **NEW**: `BatchScanner` class for efficient multi-file scanning
16
- - **NEW**: Configurable concurrency limits
17
- - **NEW**: Progress tracking and callbacks
18
- - **NEW**: Error handling with continue-on-error option
19
- - Batch statistics and performance metrics
20
-
21
- ### Threat Intelligence Integration
22
- - **NEW**: `ThreatIntelligenceAggregator` for threat detection
23
- - **NEW**: Local threat database with extensible architecture
24
- - **NEW**: Risk scoring algorithm (0-100 scale)
25
- - **NEW**: Hash-based threat lookup
26
- - Enhanced scan reports with threat intelligence data
27
-
28
- ### Advanced Export Capabilities
29
- - **NEW**: Export to JSON, CSV, Markdown, HTML, and SARIF formats
30
- - **NEW**: SARIF support for CI/CD integration
31
- - **NEW**: Customizable export options
32
- - **NEW**: HTML reports with visual styling
33
- - Perfect for reporting, analysis, and pipeline integration
34
-
35
- ### Comprehensive Configuration System
36
- - **NEW**: `ConfigManager` for centralized configuration
37
- - **NEW**: Pre-built configuration presets (fast, balanced, thorough, production, development)
38
- - **NEW**: Configuration validation
39
- - **NEW**: Callbacks for scan events
40
- - **NEW**: JSON import/export for configurations
41
-
42
- ### Enhanced Performance Tracking
43
- - **NEW**: Detailed performance metrics
44
- - **NEW**: Throughput calculations
45
- - **NEW**: Per-stage timing breakdowns
46
- - **NEW**: Statistics aggregation across multiple scans
47
-
48
- ## 🔧 Improvements
49
-
50
- ### Core Scanning
51
- - Enhanced `scanBytes` with caching support
52
- - Configuration-driven advanced detection
53
- - Callback integration for scan lifecycle events
54
- - Improved error handling and reporting
55
-
56
- ### API Enhancements
57
- - All new features are tree-shakeable
58
- - Backward compatible with v0.28.0
59
- - Type-safe configuration system
60
- - Comprehensive TypeScript definitions
61
-
62
- ### Documentation
63
- - New feature guide (FEATURES_v0.29.0.md)
64
- - Updated API documentation
65
- - Migration guide from v0.28.0
66
- - Complete configuration reference
67
-
68
- ## 📦 New Exports
69
-
70
- ```typescript
71
- // Cache Management
72
- export { ScanCacheManager, getDefaultCache, resetDefaultCache }
73
-
74
- // Batch Scanning
75
- export { BatchScanner, batchScan }
76
-
77
- // Threat Intelligence
78
- export { ThreatIntelligenceAggregator, createThreatIntelligence, getFileHash }
79
-
80
- // Export Utilities
81
- export { ScanResultExporter, exportScanResults }
82
-
83
- // Configuration
84
- export { ConfigManager, createConfig, getPresetConfig, CONFIG_PRESETS }
85
- ```
86
-
87
- ## 🐛 Bug Fixes
88
-
89
- - Improved error handling in advanced detection
90
- - Fixed potential memory leaks in cache system
91
- - Enhanced validation in configuration manager
92
-
93
- ## ⚡ Performance
94
-
95
- - Up to 80% faster for repeated scans (with cache enabled)
96
- - Optimized batch scanning with controlled concurrency
97
- - Reduced memory footprint with LRU eviction
98
- - Tree-shakeable modules for minimal bundle impact
99
-
100
- ## 📊 Bundle Size
101
-
102
- - Cache system: ~2KB gzipped
103
- - Batch scanner: ~1.5KB gzipped
104
- - Threat intelligence: ~3KB gzipped
105
- - Export utilities: ~4KB gzipped
106
- - Configuration: ~2KB gzipped
107
-
108
- Total addition: ~13KB gzipped (when all features used)
109
-
110
- ## 🔄 Breaking Changes
111
-
112
- **None** - This release is 100% backward compatible with v0.28.0
113
-
114
- ## 🎯 Migration from v0.28.0
115
-
116
- No changes required! All existing code continues to work.
117
-
118
- To adopt new features:
119
-
120
- ```typescript
121
- // Before
122
- const report = await scanBytes(data);
123
-
124
- // After (opt-in to new features)
125
- const report = await scanBytes(data, {
126
- enableCache: true,
127
- enablePerformanceTracking: true
128
- });
129
- ```
130
-
131
- ## 🙏 Contributors
132
-
133
- - Enhanced by AI-powered development
134
- - Built on the solid foundation of v0.28.0
135
-
136
- ## 📝 Notes
137
-
138
- - Recommended to use `production` config preset in production environments
139
- - Cache is opt-in to maintain backward compatibility
140
- - SARIF export enables seamless GitHub Security integration
141
-
142
- ## 🔜 Coming Soon (v0.30.0)
143
-
144
- - Machine learning-based detection
145
- - Cloud-based threat intelligence integration
146
- - WebAssembly acceleration
147
- - Advanced decompilation features
148
-
149
- ---
150
-
151
- **Full Changelog**: https://github.com/pompelmi/pompelmi/compare/v0.28.0...v0.29.0